1 stdcall I_ScGetCurrentGroupStateW(ptr wstr ptr)
2 stdcall A_SHAFinal(ptr ptr)
3 stdcall A_SHAInit(ptr)
4 stdcall A_SHAUpdate(ptr ptr long)
5 stdcall AbortSystemShutdownA(ptr)
6 stdcall AbortSystemShutdownW(ptr)
7 stdcall AccessCheck(ptr long long ptr ptr ptr ptr ptr)
8 stdcall AccessCheckAndAuditAlarmA(str ptr str str ptr long ptr long ptr ptr ptr)
9 stdcall AccessCheckAndAuditAlarmW(wstr ptr wstr wstr ptr long ptr long ptr ptr ptr)
10 stdcall AccessCheckByType(ptr ptr long long ptr long ptr ptr ptr ptr ptr)
11 stdcall AccessCheckByTypeAndAuditAlarmA(str ptr str str ptr ptr long long long ptr long ptr long ptr ptr ptr)
12 stdcall AccessCheckByTypeAndAuditAlarmW(wstr ptr wstr wstr ptr ptr long long long ptr long ptr long ptr ptr ptr)
13 stdcall AccessCheckByTypeResultList(ptr ptr ptr long ptr long ptr ptr ptr ptr ptr)
14 stdcall AccessCheckByTypeResultListAndAuditAlarmA(str ptr str str ptr long long long long ptr long ptr long ptr ptr ptr)
15 stdcall AccessCheckByTypeResultListAndAuditAlarmByHandleA(str ptr ptr str str ptr long long long long ptr long ptr long ptr ptr ptr)
16 stdcall AccessCheckByTypeResultListAndAuditAlarmByHandleW(wstr ptr ptr wstr wstr ptr long long long long ptr long ptr long ptr ptr ptr)
17 stdcall AccessCheckByTypeResultListAndAuditAlarmW(wstr ptr wstr wstr ptr long long long long ptr long ptr long ptr ptr ptr)
18 stdcall AddAccessAllowedAce(ptr long long ptr)
19 stdcall AddAccessAllowedAceEx(ptr long long long ptr)
20 stdcall AddAccessAllowedObjectAce(ptr long long long ptr ptr ptr)
21 stdcall AddAccessDeniedAce(ptr long long ptr)
22 stdcall AddAccessDeniedAceEx(ptr long long long ptr)
23 stdcall AddAccessDeniedObjectAce(ptr long long long ptr ptr ptr)
24 stdcall AddAce(ptr long long ptr long)
25 stdcall AddAuditAccessAce(ptr long long ptr long long)
26 stdcall AddAuditAccessAceEx(ptr long long long ptr long long)
27 stdcall AddAuditAccessObjectAce(ptr long long long ptr ptr ptr long long)
28 stdcall AddUsersToEncryptedFile(wstr ptr)
29 stdcall AdjustTokenGroups(long long ptr long ptr ptr)
30 stdcall AdjustTokenPrivileges(long long ptr long ptr ptr)
31 stdcall AllocateAndInitializeSid(ptr long long long long long long long long long ptr)
32 stdcall AllocateLocallyUniqueId(ptr)
33 stdcall AreAllAccessesGranted(long long)
34 stdcall AreAnyAccessesGranted(long long)
35 stdcall BackupEventLogA(long str)
36 stdcall BackupEventLogW(long wstr)
37 stdcall BuildExplicitAccessWithNameA(ptr str long long long)
38 stdcall BuildExplicitAccessWithNameW(ptr wstr long long long)
39 stdcall BuildImpersonateExplicitAccessWithNameA(ptr str ptr long long long)
40 stdcall BuildImpersonateExplicitAccessWithNameW(ptr wstr ptr long long long)
41 stdcall BuildImpersonateTrusteeA(ptr ptr)
42 stdcall BuildImpersonateTrusteeW(ptr ptr)
43 stdcall BuildSecurityDescriptorA(ptr ptr long ptr long ptr ptr ptr ptr)
44 stdcall BuildSecurityDescriptorW(ptr ptr long ptr long ptr ptr ptr ptr)
45 stdcall BuildTrusteeWithNameA(ptr str)
46 stdcall BuildTrusteeWithNameW(ptr wstr)
47 stdcall BuildTrusteeWithObjectsAndNameA(ptr ptr long str str str)
48 stdcall BuildTrusteeWithObjectsAndNameW(ptr ptr long wstr wstr wstr)
49 stdcall BuildTrusteeWithObjectsAndSidA(ptr ptr ptr ptr ptr)
50 stdcall BuildTrusteeWithObjectsAndSidW(ptr ptr ptr ptr ptr)
51 stdcall BuildTrusteeWithSidA(ptr ptr)
52 stdcall BuildTrusteeWithSidW(ptr ptr)
53 stdcall CancelOverlappedAccess(ptr)
54 stdcall ChangeServiceConfig2A(long long ptr)
55 stdcall ChangeServiceConfig2W(long long ptr)
56 stdcall ChangeServiceConfigA(long long long long wstr str ptr str str str str)
57 stdcall ChangeServiceConfigW(long long long long wstr wstr ptr wstr wstr wstr wstr)
58 stdcall CheckTokenMembership(long ptr ptr)
59 stdcall ClearEventLogA(long str)
60 stdcall ClearEventLogW(long wstr)
61 stdcall CloseCodeAuthzLevel(ptr)
62 stdcall CloseEncryptedFileRaw(ptr)
63 stdcall CloseEventLog(long)
64 stdcall CloseServiceHandle(long)
65 stdcall CloseTrace(long long)
66 stdcall CommandLineFromMsiDescriptor(wstr ptr ptr)
67 stdcall ComputeAccessTokenFromCodeAuthzLevel(ptr long)
68 stdcall ControlService(long long ptr)
69 stdcall ControlTraceA(double str ptr long) #ntdll.EtwControlTraceA ; Windows XP doesn't have this function on Ntdll
70 stdcall ControlTraceW(double wstr ptr long) #ntdll.EtwControlTraceW ; Windows XP doesn't have this function on Ntdll
71 stdcall ConvertAccessToSecurityDescriptorA(ptr ptr str str ptr)
72 stdcall ConvertAccessToSecurityDescriptorW(ptr ptr wstr wstr ptr)
73 stdcall ConvertSDToStringSDRootDomainA(long ptr long long str long)
74 stdcall ConvertSDToStringSDRootDomainW(long ptr long long wstr long)
75 stdcall ConvertSecurityDescriptorToAccessA(ptr long ptr ptr ptr str str)
76 stdcall ConvertSecurityDescriptorToAccessNamedA(str long ptr ptr ptr str str)
77 stdcall ConvertSecurityDescriptorToAccessNamedW(wstr long ptr ptr ptr wstr wstr)
78 stdcall ConvertSecurityDescriptorToAccessW(ptr long ptr ptr ptr wstr wstr)
79 stdcall ConvertSecurityDescriptorToStringSecurityDescriptorA(ptr long long ptr ptr)
80 stdcall ConvertSecurityDescriptorToStringSecurityDescriptorW(ptr long long ptr ptr)
81 stdcall ConvertSidToStringSidA(ptr ptr)
82 stdcall ConvertSidToStringSidW(ptr ptr)
83 stdcall ConvertStringSDToSDDomainA(ptr long str long long long) ;need implement
84 stdcall ConvertStringSDToSDDomainW(ptr long wstr long long long) ;need implement
85 stdcall ConvertStringSDToSDRootDomainA(long long long long long)
86 stdcall ConvertStringSDToSDRootDomainW(long long long long long)
91 stdcall ConvertToAutoInheritPrivateObjectSecurity(ptr ptr ptr ptr long ptr)
92 stdcall CopySid(long ptr ptr)
93 stdcall CreateCodeAuthzLevel()
94 stdcall CreatePrivateObjectSecurity(ptr ptr ptr long long ptr)
95 stdcall CreatePrivateObjectSecurityEx(ptr ptr ptr ptr long long ptr ptr)
96 stdcall CreatePrivateObjectSecurityWithMultipleInheritance(ptr ptr ptr ptr long long long ptr ptr)
97 stdcall CreateProcessAsUserA(long str str ptr ptr long long ptr str ptr ptr)
98 stdcall CreateProcessAsUserW(long str str ptr ptr long long ptr str ptr ptr)
99 stdcall CreateProcessWithLogonW(wstr wstr wstr long wstr wstr long ptr wstr ptr ptr)
102 stdcall CreateServiceA(long str str long long long long str str ptr str str str)
103 stdcall CreateServiceW(long wstr wstr long long long long wstr wstr ptr wstr wstr wstr)
104 stdcall CreateTraceInstanceId(ptr ptr) #ntdll.EtwCreateTraceInstanceId ; Windows XP doesn't have this function on Ntdll
106 stdcall CredDeleteA(str long long)
107 stdcall CredDeleteW(wstr long long)
108 stdcall CredEnumerateA(str long ptr ptr)
109 stdcall CredEnumerateW(wstr long ptr ptr)
110 stdcall CredFree(ptr)
111 stdcall CredGetSessionTypes(long ptr)
112 stdcall CredGetTargetInfoA(str long ptr)
113 stdcall CredGetTargetInfoW(wstr long ptr)
114 stdcall CredIsMarshaledCredentialA(str)
115 stdcall CredIsMarshaledCredentialW(wstr)
116 stdcall CredMarshalCredentialA(long ptr str)
117 stdcall CredMarshalCredentialW(long ptr wstr)
118 stdcall CredProfileLoaded()
119 stdcall CredReadA(str long long ptr)
120 stdcall CredReadDomainCredentialsA(ptr long ptr ptr)
121 stdcall CredReadDomainCredentialsW(ptr long ptr ptr)
122 stdcall CredReadW(wstr long long ptr)
123 stdcall CredRenameA(str str long long)
124 stdcall CredRenameW(wstr wstr long long)
125 stdcall CredUnmarshalCredentialA(str ptr ptr)
126 stdcall CredUnmarshalCredentialW(wstr ptr ptr)
127 stdcall CredWriteA(ptr long)
128 stdcall CredWriteDomainCredentialsA(ptr ptr long) advapi32.CredWriteDomainCredentialsA ;for reactos
129 stdcall CredWriteDomainCredentialsW(ptr ptr long)
130 stdcall CredWriteW(ptr long)
131 stdcall CredpConvertCredential(long long long ptr)
132 stdcall CredpConvertTargetInfo(long long ptr long) ;need implement
133 stdcall CredpDecodeCredential(ptr) ;need implement
134 stdcall CredpEncodeCredential(ptr) ;need implement
135 stdcall CryptAcquireContextA(ptr str str long long)
136 stdcall CryptAcquireContextW(ptr wstr wstr long long)
137 stdcall CryptContextAddRef(long ptr long)
138 stdcall CryptCreateHash(long long long long ptr)
139 stdcall CryptDecrypt(long long long long ptr ptr)
140 stdcall CryptDeriveKey(long long long long ptr)
141 stdcall CryptDestroyHash(long)
142 stdcall CryptDestroyKey(long)
143 stdcall CryptDuplicateHash(long ptr long ptr)
144 stdcall CryptDuplicateKey(long ptr long ptr)
145 stdcall CryptEncrypt(long long long long ptr ptr long)
146 stdcall CryptEnumProviderTypesA(long ptr long ptr ptr ptr)
147 stdcall CryptEnumProviderTypesW(long ptr long ptr ptr ptr)
148 stdcall CryptEnumProvidersA(long ptr long ptr ptr ptr)
149 stdcall CryptEnumProvidersW(long ptr long ptr ptr ptr)
150 stdcall CryptExportKey(long long long long ptr ptr)
151 stdcall CryptGenKey(long long long ptr)
152 stdcall CryptGenRandom(long long ptr)
153 stdcall CryptGetDefaultProviderA(long ptr long ptr ptr)
154 stdcall CryptGetDefaultProviderW(long ptr long ptr ptr)
155 stdcall CryptGetHashParam(long long ptr ptr long)
156 stdcall CryptGetKeyParam(long long ptr ptr long)
157 stdcall CryptGetProvParam(long long ptr ptr long)
158 stdcall CryptGetUserKey(long long ptr)
159 stdcall CryptHashData(long ptr long long)
160 stdcall CryptHashSessionKey(long long long)
161 stdcall CryptImportKey(long ptr long long long ptr)
162 stdcall CryptReleaseContext(long long)
163 stdcall CryptSetHashParam(long long ptr long)
164 stdcall CryptSetKeyParam(long long ptr long)
165 stdcall CryptSetProvParam(long long ptr long)
166 stdcall CryptSetProviderA(str long)
167 stdcall CryptSetProviderExA(str long ptr long)
168 stdcall CryptSetProviderExW(wstr long ptr long)
169 stdcall CryptSetProviderW(wstr long)
170 stdcall CryptSignHashA(long long ptr long ptr ptr)
171 stdcall CryptSignHashW(long long ptr long ptr ptr)
172 stdcall CryptVerifySignatureA(long ptr long long ptr long)
173 stdcall CryptVerifySignatureW(long ptr long long ptr long)
174 stdcall DecryptFileA(str long)
175 stdcall DecryptFileW(wstr long)
176 stdcall DeleteAce(ptr long)
177 stdcall DeleteService(long)
178 stdcall DeregisterEventSource(long)
179 stdcall DestroyPrivateObjectSecurity(ptr)
180 stdcall DuplicateEncryptionInfoFile(wstr wstr long long ptr)
181 stdcall DuplicateToken(long long ptr)
182 stdcall DuplicateTokenEx(long long ptr long long ptr)
183 stdcall ElfBackupEventLogFileA(long ptr)
184 stdcall ElfBackupEventLogFileW(long ptr)
185 stdcall ElfChangeNotify(long long)
186 stdcall ElfClearEventLogFileA(long ptr)
187 stdcall ElfClearEventLogFileW(long ptr)
188 stdcall ElfCloseEventLog(long)
189 stdcall ElfDeregisterEventSource(long)
191 stdcall ElfNumberOfRecords(long ptr)
192 stdcall ElfOldestRecord(long ptr)
193 stdcall ElfOpenBackupEventLogA(ptr ptr ptr)
194 stdcall ElfOpenBackupEventLogW(ptr ptr ptr)
195 stdcall ElfOpenEventLogA(ptr ptr ptr)
196 stdcall ElfOpenEventLogW(ptr ptr ptr)
197 stdcall ElfReadEventLogA(long long long ptr long ptr ptr)
198 stdcall ElfReadEventLogW(long long long ptr long ptr ptr)
199 stdcall ElfRegisterEventSourceA(ptr ptr ptr)
200 stdcall ElfRegisterEventSourceW(ptr ptr ptr)
201 stdcall ElfReportEventA(long long long long ptr long long ptr ptr long ptr ptr)
203 stdcall ElfReportEventW(long long long long ptr long long ptr ptr long ptr ptr)
204 stdcall EnableTrace(long long long ptr double) #ntdll.EtwEnableTrace ; Windows XP doesn't have this function on Ntdll
205 stdcall EncryptFileA(str)
206 stdcall EncryptFileW(wstr)
207 stdcall EncryptedFileKeyInfo(long long long)
208 stdcall EncryptionDisable(wstr long)
209 stdcall EnumDependentServicesA(long long ptr long ptr ptr)
210 stdcall EnumDependentServicesW(long long ptr long ptr ptr)
211 stdcall EnumServiceGroupW(ptr long long ptr long ptr ptr ptr wstr)
212 stdcall EnumServicesStatusA(long long long ptr long ptr ptr ptr)
213 stdcall EnumServicesStatusExA(long long long long ptr long ptr ptr ptr str)
214 stdcall EnumServicesStatusExW(long long long long ptr long ptr ptr ptr wstr)
215 stdcall EnumServicesStatusW(long long long ptr long ptr ptr ptr)
216 stdcall EnumerateTraceGuids(ptr long ptr) #ntdll.EtwEnumerateTraceGuids ; Windows XP doesn't have this function on Ntdll
217 stdcall EqualDomainSid(ptr ptr ptr)
218 stdcall EqualPrefixSid(ptr ptr)
219 stdcall EqualSid(ptr ptr)
220 stdcall FileEncryptionStatusA(str ptr)
221 stdcall FileEncryptionStatusW(wstr ptr)
222 stdcall FindFirstFreeAce(ptr ptr)
223 stdcall FlushTraceA(double str ptr) #ntdll.EtwFlushTraceA ; Windows XP doesn't have this function on Ntdll
224 stdcall FlushTraceW(double wstr ptr) #ntdll.EtwFlushTraceW ; Windows XP doesn't have this function on Ntdll
225 stdcall FreeEncryptedFileKeyInfo(long)
226 stdcall FreeEncryptionCertificateHashList(ptr)
227 stdcall FreeInheritedFromArray(ptr long ptr)
228 stdcall FreeSid(ptr)
229 stdcall GetAccessPermissionsForObjectA(str long str str ptr ptr ptr ptr ptr)
230 stdcall GetAccessPermissionsForObjectW(wstr long wstr wstr ptr ptr ptr ptr ptr)
231 stdcall GetAce(ptr long ptr)
232 stdcall GetAclInformation(ptr ptr long long)
233 stdcall GetAuditedPermissionsFromAclA(ptr ptr ptr ptr)
234 stdcall GetAuditedPermissionsFromAclW(ptr ptr ptr ptr)
235 stdcall GetCurrentHwProfileA(ptr)
236 stdcall GetCurrentHwProfileW(ptr)
237 stdcall GetEffectiveRightsFromAclA(ptr ptr ptr)
238 stdcall GetEffectiveRightsFromAclW(ptr ptr ptr)
239 stdcall GetEventLogInformation(long long ptr long ptr)
240 stdcall GetExplicitEntriesFromAclA(ptr ptr ptr) advapi32.GetExplicitEntriesFromAclW
241 stdcall GetExplicitEntriesFromAclW(ptr ptr ptr)
242 stdcall GetFileSecurityA(str long ptr long ptr)
243 stdcall GetFileSecurityW(wstr long ptr long ptr)
244 stdcall GetInformationCodeAuthzLevelW()
245 stdcall GetInformationCodeAuthzPolicyW()
246 stdcall GetInheritanceSourceA(str long long long ptr long ptr ptr ptr ptr)
247 stdcall GetInheritanceSourceW(wstr long long long ptr long ptr ptr ptr ptr)
249 stdcall GetLengthSid(ptr)
250 stdcall GetLocalManagedApplicationData(wstr wstr wstr)
251 stdcall GetLocalManagedApplications(long ptr ptr)
252 stdcall GetManagedApplicationCategories(long ptr)
253 stdcall GetManagedApplications(ptr long long ptr ptr)
254 stdcall GetMultipleTrusteeA(ptr)
255 stdcall GetMultipleTrusteeOperationA(ptr)
256 stdcall GetMultipleTrusteeOperationW(ptr)
257 stdcall GetMultipleTrusteeW(ptr)
258 stdcall GetNamedSecurityInfoA(str long long ptr ptr ptr ptr ptr)
259 stdcall GetNamedSecurityInfoExA(str long long str str ptr ptr str str)
260 stdcall GetNamedSecurityInfoExW(wstr long long wstr wstr ptr ptr wstr wstr)
262 stdcall GetNumberOfEventLogRecords(long ptr)
263 stdcall GetOldestEventLogRecord(long ptr)
264 stdcall GetOverlappedAccessResults(ptr long ptr ptr)
265 stdcall GetPrivateObjectSecurity(ptr long ptr long ptr)
266 stdcall GetSecurityDescriptorControl(ptr ptr ptr)
267 stdcall GetSecurityDescriptorDacl(ptr ptr ptr ptr)
268 stdcall GetSecurityDescriptorGroup(ptr ptr ptr)
269 stdcall GetSecurityDescriptorLength(ptr) #ntdll.RtlLengthSecurityDescriptor
270 stdcall GetSecurityDescriptorOwner(ptr ptr ptr)
271 stdcall GetSecurityDescriptorRMControl(ptr ptr)
272 stdcall GetSecurityDescriptorSacl(ptr ptr ptr ptr)
274 stdcall GetSecurityInfoExA(long long long str str ptr ptr ptr ptr)
275 stdcall GetSecurityInfoExW(long long long wstr wstr ptr ptr ptr ptr)
276 stdcall GetServiceDisplayNameA(ptr str ptr ptr)
277 stdcall GetServiceDisplayNameW(ptr wstr ptr ptr)
278 stdcall GetServiceKeyNameA(long str ptr ptr)
279 stdcall GetServiceKeyNameW(long wstr ptr ptr)
280 stdcall GetSidIdentifierAuthority(ptr)
281 stdcall GetSidLengthRequired(long)
282 stdcall GetSidSubAuthority(ptr long)
283 stdcall GetSidSubAuthorityCount(ptr)
285 stdcall GetTraceEnableFlags(double) #ntdll.EtwGetTraceEnableFlags ; Windows XP doesn't have this function on Ntdll
286 stdcall GetTraceEnableLevel(double) #ntdll.EtwGetTraceEnableLevel ; Windows XP doesn't have this function on Ntdll
287 stdcall GetTraceLoggerHandle(ptr) #ntdll.EtwGetTraceLoggerHandle ; Windows XP doesn't have this function on Ntdll
288 stdcall GetTrusteeFormA(ptr)
289 stdcall GetTrusteeFormW(ptr)
290 stdcall GetTrusteeNameA(ptr)
291 stdcall GetTrusteeNameW(ptr)
292 stdcall GetTrusteeTypeA(ptr)
293 stdcall GetTrusteeTypeW(ptr)
294 stdcall GetUserNameA(ptr ptr)
295 stdcall GetUserNameW(ptr ptr)
296 stdcall GetWindowsAccountDomainSid(ptr ptr ptr)
298 stdcall I_ScIsSecurityProcess()
299 stdcall I_ScPnPGetServiceName(ptr wstr long)
300 stdcall I_ScSendTSMessage(long long long long)
301 stdcall I_ScSetServiceBitsA(ptr long long long str)
302 stdcall I_ScSetServiceBitsW(ptr long long long wstr)
303 stdcall IdentifyCodeAuthzLevelW()
304 stdcall ImpersonateAnonymousToken(ptr)
305 stdcall ImpersonateLoggedOnUser(long)
306 stdcall ImpersonateNamedPipeClient(long)
307 stdcall ImpersonateSelf(long)
308 stdcall InitializeAcl(ptr long long)
309 stdcall InitializeSecurityDescriptor(ptr long)
310 stdcall InitializeSid(ptr ptr long)
311 stdcall InitiateSystemShutdownA(str str long long long)
312 stdcall InitiateSystemShutdownExA(str str long long long long)
313 stdcall InitiateSystemShutdownExW(wstr wstr long long long long)
314 stdcall InitiateSystemShutdownW(str str long long long)
315 stdcall InstallApplication(ptr)
316 stdcall IsTextUnicode(ptr long ptr)
317 stdcall IsTokenRestricted(long)
318 stdcall IsTokenUntrusted(ptr)
319 stdcall IsValidAcl(ptr)
320 stdcall IsValidSecurityDescriptor(ptr)
321 stdcall IsValidSid(ptr)
323 stdcall LockServiceDatabase(ptr)
324 stdcall LogonUserA(str str str long long ptr)
325 stdcall LogonUserExA(str str str long long ptr ptr ptr ptr ptr)
326 stdcall LogonUserExW(wstr wstr wstr long long ptr ptr ptr ptr ptr)
327 stdcall LogonUserW(wstr wstr wstr long long ptr)
328 stdcall LookupAccountNameA(str str ptr ptr ptr ptr ptr)
329 stdcall LookupAccountNameW(wstr wstr ptr ptr ptr ptr ptr)
330 stdcall LookupAccountSidA(ptr ptr ptr ptr ptr ptr ptr)
331 stdcall LookupAccountSidW(ptr ptr ptr ptr ptr ptr ptr)
332 stdcall LookupPrivilegeDisplayNameA(str str str ptr ptr)
333 stdcall LookupPrivilegeDisplayNameW(wstr wstr wstr ptr ptr)
334 stdcall LookupPrivilegeNameA(str ptr ptr long)
335 stdcall LookupPrivilegeNameW(wstr ptr ptr long)
336 stdcall LookupPrivilegeValueA(ptr ptr ptr)
337 stdcall LookupPrivilegeValueW(ptr ptr ptr)
338 stdcall LookupSecurityDescriptorPartsA(ptr ptr ptr ptr ptr ptr ptr)
339 stdcall LookupSecurityDescriptorPartsW(ptr ptr ptr ptr ptr ptr ptr)
340 stdcall LsaAddAccountRights(ptr ptr ptr long)
341 stdcall LsaAddPrivilegesToAccount(ptr ptr)
342 stdcall LsaClearAuditLog(ptr)
343 stdcall LsaClose(ptr)
344 stdcall LsaCreateAccount(ptr ptr long ptr)
345 stdcall LsaCreateSecret(ptr ptr long ptr)
346 stdcall LsaCreateTrustedDomain(ptr ptr long ptr)
347 stdcall LsaCreateTrustedDomainEx(ptr ptr ptr long ptr)
348 stdcall LsaDelete(ptr)
349 stdcall LsaDeleteTrustedDomain(ptr ptr)
350 stdcall LsaEnumerateAccountRights(ptr ptr ptr ptr)
351 stdcall LsaEnumerateAccounts(ptr ptr ptr long ptr)
352 stdcall LsaEnumerateAccountsWithUserRight(ptr ptr ptr ptr)
353 stdcall LsaEnumeratePrivileges(ptr ptr ptr long ptr)
354 stdcall LsaEnumeratePrivilegesOfAccount(ptr ptr)
355 stdcall LsaEnumerateTrustedDomains(ptr ptr ptr long ptr)
356 stdcall LsaEnumerateTrustedDomainsEx(ptr ptr ptr long ptr)
357 stdcall LsaFreeMemory(ptr)
358 stdcall LsaGetQuotasForAccount(ptr ptr)
359 stdcall LsaGetRemoteUserName(ptr ptr ptr)
360 stdcall LsaGetSystemAccessAccount(ptr ptr)
361 stdcall LsaGetUserName(ptr ptr)
362 stdcall LsaICLookupNames(long long long ptr ptr long long long long long)
363 stdcall LsaICLookupNamesWithCreds(wstr wstr long long ptr long long long long long long long)
364 stdcall LsaICLookupSids(long long long ptr ptr long long long long)
365 stdcall LsaICLookupSidsWithCreds(wstr wstr long long ptr long long long long long long long)
366 stdcall LsaLookupNames2(ptr long long ptr ptr ptr)
367 stdcall LsaLookupNames(ptr long ptr ptr ptr)
368 stdcall LsaLookupPrivilegeDisplayName(ptr ptr ptr ptr)
369 stdcall LsaLookupPrivilegeName(ptr ptr ptr)
370 stdcall LsaLookupPrivilegeValue(ptr ptr ptr)
371 stdcall LsaLookupSids(ptr long ptr ptr ptr)
372 stdcall LsaNtStatusToWinError(long)
373 stdcall LsaOpenAccount(ptr ptr long ptr)
374 stdcall LsaOpenPolicy(ptr ptr long ptr)
375 stdcall LsaOpenPolicySce(ptr ptr long ptr)
376 stdcall LsaOpenSecret(ptr ptr long ptr)
377 stdcall LsaOpenTrustedDomain(ptr ptr long ptr)
378 stdcall LsaOpenTrustedDomainByName(ptr ptr long ptr)
379 stdcall LsaQueryDomainInformationPolicy(ptr long ptr)
380 stdcall LsaQueryForestTrustInformation(ptr ptr ptr)
381 stdcall LsaQueryInfoTrustedDomain(ptr long ptr)
382 stdcall LsaQueryInformationPolicy(ptr long ptr)
383 stdcall LsaQuerySecret(ptr ptr ptr ptr ptr)
384 stdcall LsaQuerySecurityObject(ptr long ptr)
385 stdcall LsaQueryTrustedDomainInfo(ptr ptr long ptr)
386 stdcall LsaQueryTrustedDomainInfoByName(ptr ptr long ptr)
387 stdcall LsaRemoveAccountRights(ptr ptr long ptr long)
388 stdcall LsaRemovePrivilegesFromAccount(ptr long ptr)
389 stdcall LsaRetrievePrivateData(ptr ptr ptr)
390 stdcall LsaSetDomainInformationPolicy(ptr long ptr)
391 stdcall LsaSetForestTrustInformation(ptr ptr ptr long ptr)
392 stdcall LsaSetInformationPolicy(ptr long ptr)
393 stdcall LsaSetInformationTrustedDomain(ptr long ptr)
394 stdcall LsaSetQuotasForAccount(ptr ptr)
395 stdcall LsaSetSecret(ptr ptr ptr)
396 stdcall LsaSetSecurityObject(ptr long ptr)
397 stdcall LsaSetSystemAccessAccount(ptr long)
398 stdcall LsaSetTrustedDomainInfoByName(ptr ptr long ptr)
399 stdcall LsaSetTrustedDomainInformation(ptr ptr long ptr)
400 stdcall LsaStorePrivateData(ptr ptr ptr)
401 stdcall MD4Final(ptr)
402 stdcall MD4Init(ptr)
403 stdcall MD4Update(ptr ptr long)
404 stdcall MD5Final(ptr)
405 stdcall MD5Init(ptr)
406 stdcall MD5Update(ptr ptr long)
407 stdcall MSChapSrvChangePassword2(wstr wstr ptr ptr long ptr ptr)
408 stdcall MSChapSrvChangePassword(wstr wstr long ptr ptr ptr ptr)
409 stdcall MakeAbsoluteSD2(ptr ptr)
410 stdcall MakeAbsoluteSD(ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr)
411 stdcall MakeSelfRelativeSD(ptr ptr ptr)
412 stdcall MapGenericMask(ptr ptr) #ntdll.RtlMapGenericMask
413 stdcall NotifyBootConfigStatus(long)
414 stdcall NotifyChangeEventLog(long long)
415 stdcall ObjectCloseAuditAlarmA(str ptr long)
416 stdcall ObjectCloseAuditAlarmW(wstr ptr long)
417 stdcall ObjectDeleteAuditAlarmA(str ptr long)
418 stdcall ObjectDeleteAuditAlarmW(wstr ptr long)
419 stdcall ObjectOpenAuditAlarmA(str ptr str str ptr long long long ptr long long ptr)
420 stdcall ObjectOpenAuditAlarmW(wstr ptr wstr wstr ptr long long long ptr long long ptr)
421 stdcall ObjectPrivilegeAuditAlarmA(str ptr long long ptr long)
422 stdcall ObjectPrivilegeAuditAlarmW(wstr ptr long long ptr long)
423 stdcall OpenBackupEventLogA(str str)
424 stdcall OpenBackupEventLogW(wstr wstr)
425 stdcall OpenEncryptedFileRawA(str long ptr)
426 stdcall OpenEncryptedFileRawW(wstr long ptr)
427 stdcall OpenEventLogA(str str)
428 stdcall OpenEventLogW(wstr wstr)
430 stdcall OpenSCManagerA(str str long)
431 stdcall OpenSCManagerW(wstr wstr long)
432 stdcall OpenServiceA(long str long)
433 stdcall OpenServiceW(long wstr long)
435 stdcall OpenTraceA(ptr)
436 stdcall OpenTraceW(ptr)
437 stdcall PrivilegeCheck(ptr ptr ptr)
438 stdcall PrivilegedServiceAuditAlarmA(str str long ptr long)
439 stdcall PrivilegedServiceAuditAlarmW(wstr wstr long ptr long)
440 stdcall ProcessIdleTasks()
441 stdcall ProcessTrace(ptr long ptr ptr)
442 stdcall QueryAllTracesA(ptr long ptr) #ntdll.EtwQueryAllTracesA ; Windows XP doesn't have this function on Ntdll
443 stdcall QueryAllTracesW(ptr long ptr) #ntdll.EtwQueryAllTracesW ; Windows XP doesn't have this function on Ntdll
444 stdcall QueryRecoveryAgentsOnEncryptedFile(wstr ptr)
445 stdcall QueryServiceConfig2A(long long ptr long ptr)
446 stdcall QueryServiceConfig2W(long long ptr long ptr)
447 stdcall QueryServiceConfigA(long ptr long ptr)
448 stdcall QueryServiceConfigW(long ptr long ptr)
449 stdcall QueryServiceLockStatusA(long ptr long ptr)
450 stdcall QueryServiceLockStatusW(long ptr long ptr)
451 stdcall QueryServiceObjectSecurity(long long ptr long ptr)
452 stdcall QueryServiceStatus(long ptr)
453 stdcall QueryServiceStatusEx(long long ptr long ptr)
454 stdcall QueryTraceA(double str ptr) #ntdll.EtwQueryTraceA ; Windows XP doesn't have this function on Ntdll
455 stdcall QueryTraceW(double str ptr) #ntdll.EtwQueryTraceA ; Windows XP doesn't have this function on Ntdll
456 stdcall QueryUsersOnEncryptedFile(wstr ptr)
457 stdcall ReadEncryptedFileRaw(ptr ptr ptr)
458 stdcall ReadEventLogA(long long long ptr long ptr ptr)
459 stdcall ReadEventLogW(long long long ptr long ptr ptr)
460 stdcall RegCloseKey(long)
461 stdcall RegConnectRegistryA(str long ptr)
464 stdcall RegConnectRegistryW(wstr long ptr)
465 stdcall RegCreateKeyA(long str ptr)
466 stdcall RegCreateKeyExA(long str long ptr long long ptr ptr ptr)
467 stdcall RegCreateKeyExW(long wstr long ptr long long ptr ptr ptr)
468 stdcall RegCreateKeyW(long wstr ptr)
469 stdcall RegDeleteKeyA(long str)
472 stdcall RegDeleteKeyW(long wstr)
473 stdcall RegDeleteValueA(long str)
474 stdcall RegDeleteValueW(long wstr)
475 stdcall RegDisablePredefinedCache()
478 stdcall RegEnumKeyA(long long ptr long)
479 stdcall RegEnumKeyExA(long long ptr ptr ptr ptr ptr ptr)
480 stdcall RegEnumKeyExW(long long ptr ptr ptr ptr ptr ptr)
481 stdcall RegEnumKeyW(long long ptr long)
482 stdcall RegEnumValueA(long long ptr ptr ptr ptr ptr ptr)
483 stdcall RegEnumValueW(long long ptr ptr ptr ptr ptr ptr)
484 stdcall RegFlushKey(long)
485 stdcall RegGetKeySecurity(long long ptr ptr)
488 stdcall RegLoadKeyA(long str str)
489 stdcall RegLoadKeyW(long wstr wstr)
491 stdcall RegOpenCurrentUser(long ptr)
492 stdcall RegOpenKeyA(long str ptr)
493 stdcall RegOpenKeyExA(long str long long ptr)
494 stdcall RegOpenKeyExW(long wstr long long ptr)
495 stdcall RegOpenKeyW(long wstr ptr)
496 stdcall RegOpenUserClassesRoot(ptr long long ptr)
497 stdcall RegOverridePredefKey(long long)
498 stdcall RegQueryInfoKeyA(long ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr)
499 stdcall RegQueryInfoKeyW(long ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr ptr)
500 stdcall RegQueryMultipleValuesA(long ptr long ptr ptr)
501 stdcall RegQueryMultipleValuesW(long ptr long ptr ptr)
503 stdcall RegQueryValueA(long str ptr ptr)
504 stdcall RegQueryValueExA(long str ptr ptr ptr ptr)
505 stdcall RegQueryValueExW(long wstr ptr ptr ptr ptr)
506 stdcall RegQueryValueW(long wstr ptr ptr)
507 stdcall RegReplaceKeyA(long str str str)
508 stdcall RegReplaceKeyW(long wstr wstr wstr)
509 stdcall RegRestoreKeyA(long str long)
510 stdcall RegRestoreKeyW(long wstr long)
511 stdcall RegSaveKeyA(long ptr ptr)
512 stdcall RegSaveKeyExA(long str ptr long)
513 stdcall RegSaveKeyExW(long str ptr long)
514 stdcall RegSaveKeyW(long ptr ptr)
515 stdcall RegSetKeySecurity(long long ptr)
516 stdcall RegSetValueA(long str long ptr long)
517 stdcall RegSetValueExA(long str long long ptr long)
518 stdcall RegSetValueExW(long wstr long long ptr long)
519 stdcall RegSetValueW(long wstr long ptr long)
520 stdcall RegUnLoadKeyA(long str)
521 stdcall RegUnLoadKeyW(long wstr)
522 stdcall RegisterEventSourceA(ptr ptr)
523 stdcall RegisterEventSourceW(ptr ptr)
524 stdcall RegisterIdleTask(long long ptr ptr)
525 stdcall RegisterServiceCtrlHandlerA(str ptr)
526 stdcall RegisterServiceCtrlHandlerExA(str ptr ptr)
527 stdcall RegisterServiceCtrlHandlerExW(wstr ptr ptr)
528 stdcall RegisterServiceCtrlHandlerW(wstr ptr)
529 stdcall RegisterTraceGuidsA(ptr ptr ptr long ptr str str ptr) #ntdll.EtwRegisterTraceGuidsA ; Windows XP doesn't have this function on Ntdll
530 stdcall RegisterTraceGuidsW(ptr ptr ptr long ptr wstr wstr ptr) #ntdll.EtwRegisterTraceGuidsW ; Windows XP doesn't have this function on Ntdll
531 stdcall RemoveTraceCallback(ptr)
532 stdcall RemoveUsersFromEncryptedFile(wstr ptr)
533 stdcall ReportEventA(long long long long ptr long long str ptr)
534 stdcall ReportEventW(long long long long ptr long long wstr ptr)
535 stdcall RevertToSelf()
536 stdcall SaferCloseLevel(ptr)
537 stdcall SaferComputeTokenFromLevel(ptr ptr ptr long ptr)
538 stdcall SaferCreateLevel(long long long ptr ptr)
539 stdcall SaferGetLevelInformation(ptr long ptr long ptr)
540 stdcall SaferGetPolicyInformation(long long long ptr ptr ptr)
541 stdcall SaferIdentifyLevel(long ptr ptr ptr)
542 stdcall SaferRecordEventLogEntry(ptr wstr ptr)
543 stdcall SaferSetLevelInformation(ptr long ptr long)
544 stdcall SaferSetPolicyInformation(long long long ptr ptr)
545 stdcall SaferiChangeRegistryScope(ptr long)
546 stdcall SaferiCompareTokenLevels(long long long)
547 stdcall SaferiIsExecutableFileType(wstr long)
548 stdcall SaferiPopulateDefaultsInRegistry(ptr long)
549 stdcall SaferiRecordEventLogEntry()
550 stdcall SaferiReplaceProcessThreadTokens(ptr ptr ptr)
551 stdcall SaferiSearchMatchingHashRules(long ptr long long ptr ptr)
552 stdcall SetAclInformation(ptr ptr long long)
553 stdcall SetEntriesInAccessListA(long ptr long str ptr ptr)
554 stdcall SetEntriesInAccessListW(long ptr long wstr ptr ptr)
555 stdcall SetEntriesInAclA(long ptr ptr ptr)
556 stdcall SetEntriesInAclW(long ptr ptr ptr)
557 stdcall SetEntriesInAuditListA(long ptr long str ptr ptr)
558 stdcall SetEntriesInAuditListW(long ptr long wstr ptr ptr)
559 stdcall SetFileSecurityA(str long ptr)
560 stdcall SetFileSecurityW(wstr long ptr)
561 stdcall SetInformationCodeAuthzLevelW()
562 stdcall SetInformationCodeAuthzPolicyW()
564 stdcall SetNamedSecurityInfoA(str long ptr ptr ptr ptr ptr)
565 stdcall SetNamedSecurityInfoExA(str long long str ptr ptr str str ptr)
566 stdcall SetNamedSecurityInfoExW(wstr long long wstr ptr ptr wstr wstr ptr)
568 stdcall SetPrivateObjectSecurity(long ptr ptr ptr long)
569 stdcall SetPrivateObjectSecurityEx(long ptr ptr long ptr ptr)
570 stdcall SetSecurityDescriptorControl(ptr long long)
571 stdcall SetSecurityDescriptorDacl(ptr long ptr long)
572 stdcall SetSecurityDescriptorGroup(ptr ptr long)
573 stdcall SetSecurityDescriptorOwner(ptr ptr long)
574 stdcall SetSecurityDescriptorRMControl(ptr ptr)
575 stdcall SetSecurityDescriptorSacl(ptr long ptr long)
577 stdcall SetSecurityInfoExA(ptr long long str ptr ptr str str ptr)
578 stdcall SetSecurityInfoExW(ptr long long wstr ptr ptr wstr wstr ptr)
579 stdcall SetServiceBits(long long long long)
580 stdcall SetServiceObjectSecurity(long long ptr)
581 stdcall SetServiceStatus(long long)
582 stdcall SetThreadToken(ptr ptr)
584 stdcall SetTraceCallback(ptr ptr)
585 stdcall SetUserFileEncryptionKey(ptr)
586 stdcall StartServiceA(long long ptr)
587 stdcall StartServiceCtrlDispatcherA(ptr)
588 stdcall StartServiceCtrlDispatcherW(ptr)
589 stdcall StartServiceW(long long ptr)
590 stdcall StartTraceA(ptr str ptr) #ntdll.EtwStartTraceA ; Windows XP doesn't have this function on Ntdll
591 stdcall StartTraceW(ptr wstr ptr) #ntdll.EtwStartTraceW ; Windows XP doesn't have this function on Ntdll
592 stdcall StopTraceA(double str ptr) #ntdll.EtwStopTraceA ; Windows XP doesn't have this function on Ntdll
593 stdcall StopTraceW(double wstr ptr) #ntdll.EtwStopTraceA ; Windows XP doesn't have this function on Ntdll
594 stdcall SystemFunction001(ptr ptr ptr)
595 stdcall SystemFunction002(ptr ptr ptr)
596 stdcall SystemFunction003(ptr ptr)
597 stdcall SystemFunction004(ptr ptr ptr)
598 stdcall SystemFunction005(ptr ptr ptr)
599 stdcall SystemFunction006(ptr ptr)
600 stdcall SystemFunction007(ptr ptr)
601 stdcall SystemFunction008(ptr ptr ptr)
602 stdcall SystemFunction009(ptr ptr ptr)
603 stdcall SystemFunction010(ptr ptr ptr)
604 stdcall SystemFunction011(ptr ptr ptr)
605 stdcall SystemFunction012(ptr ptr ptr)
606 stdcall SystemFunction013(ptr ptr ptr)
607 stdcall SystemFunction014(ptr ptr ptr)
608 stdcall SystemFunction015(ptr ptr ptr)
609 stdcall SystemFunction016(ptr ptr ptr)
610 stdcall SystemFunction017(ptr ptr ptr)
611 stdcall SystemFunction018(ptr ptr ptr)
612 stdcall SystemFunction019(ptr ptr ptr)
613 stdcall SystemFunction020(ptr ptr ptr)
614 stdcall SystemFunction021(ptr ptr ptr)
615 stdcall SystemFunction022(ptr ptr ptr)
616 stdcall SystemFunction023(ptr ptr ptr)
617 stdcall SystemFunction024(ptr ptr ptr)
618 stdcall SystemFunction025(ptr ptr ptr)
619 stdcall SystemFunction026(ptr ptr ptr)
620 stdcall SystemFunction027(ptr ptr ptr)
621 stdcall SystemFunction028(long long)
622 stdcall SystemFunction029(long long)
623 stdcall SystemFunction030(ptr ptr)
624 stdcall SystemFunction031(ptr ptr)
625 stdcall SystemFunction032(ptr ptr)
626 stdcall SystemFunction033(long long)
627 stdcall SystemFunction034(long long)
628 stdcall SystemFunction035(str)
629 stdcall SystemFunction036(ptr long) # RtlGenRandom
630 stdcall SystemFunction040(ptr long long) # RtlEncryptMemory
631 stdcall SystemFunction041(ptr long long) # RtlDecryptMemory
632 stdcall TraceEvent(double ptr) #ntdll.EtwTraceEvent ; Windows XP doesn't have this function on Ntdll
633 stdcall TraceEventInstance(double ptr ptr ptr) #ntdll.EtwTraceEventInstance ; Windows XP doesn't have this function on Ntdll
634 varargs TraceMessage(ptr long ptr long) #ntdll.EtwTraceMessage ; Windows XP doesn't have this function on Ntdll
635 stdcall TraceMessageVa(double long ptr long ptr) #ntdll.EtwTraceMessageVa ; Windows XP doesn't have this function on Ntdll
636 stdcall TreeResetNamedSecurityInfoA(str ptr ptr ptr ptr ptr ptr long ptr ptr ptr)
637 stdcall TreeResetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr long ptr long ptr)
638 stdcall TrusteeAccessToObjectA(str long str ptr long ptr)
639 stdcall TrusteeAccessToObjectW(wstr long wstr ptr long ptr)
640 stdcall UninstallApplication(ptr long)
641 stdcall UnlockServiceDatabase(ptr)
642 stdcall UnregisterIdleTask(long ptr ptr)
643 stdcall UnregisterTraceGuids(double) #ntdll.EtwUnregisterTraceGuids ; Windows XP doesn't have this function on Ntdll
644 stdcall UpdateTraceA(double str ptr) #ntdll.EtwUpdateTraceA ; Windows XP doesn't have this function on Ntdll
645 stdcall UpdateTraceW(double wstr ptr) #ntdll.EtwUpdateTraceW ; Windows XP doesn't have this function on Ntdll
646 stdcall WdmWmiServiceMain(ptr long)
647 stdcall WmiCloseBlock(ptr)
650 stdcall WmiDevInstToInstanceNameA(ptr long str long)
651 stdcall WmiDevInstToInstanceNameW(ptr long wstr long)
652 stdcall WmiEnumerateGuids(long long)
653 stdcall WmiExecuteMethodA(long str long long long long long)
654 stdcall WmiExecuteMethodW(long wstr long long long long long)
655 stdcall WmiFileHandleToInstanceNameA(long long ptr long)
656 stdcall WmiFileHandleToInstanceNameW(long long ptr long)
657 stdcall WmiFreeBuffer(ptr)
658 stdcall WmiGetFirstTraceOffset(long long)
660 stdcall WmiGetTraceHeader(long long long)
661 stdcall WmiMofEnumerateResourcesA(long long long)
662 stdcall WmiMofEnumerateResourcesW(long long long)
663 stdcall WmiNotificationRegistrationA(ptr long ptr long long) #ntdll.EtwNotificationRegistrationA ; Windows XP doesn't have this function on Ntdll
664 stdcall WmiNotificationRegistrationW(ptr long ptr long long) #ntdll.EtwNotificationRegistrationW ; Windows XP doesn't have this function on Ntdll
665 stdcall WmiOpenBlock(long long long)
668 stdcall WmiQueryAllDataA(long ptr ptr)
669 stdcall WmiQueryAllDataMultipleA(long long long ptr)
670 stdcall WmiQueryAllDataMultipleW(long long long ptr)
671 stdcall WmiQueryAllDataW(long ptr ptr)
672 stdcall WmiQueryGuidInformation(ptr ptr)
673 stdcall WmiQuerySingleInstanceA(long str ptr ptr)
674 stdcall WmiQuerySingleInstanceMultipleA(long long long long long)
675 stdcall WmiQuerySingleInstanceMultipleW(long long long long long)
676 stdcall WmiQuerySingleInstanceW(long wstr ptr ptr)
677 stdcall WmiReceiveNotificationsA(long long long long) #ntdll.EtwReceiveNotificationsA
678 stdcall WmiReceiveNotificationsW(long long long long) #ntdll.EtwReceiveNotificationsW
679 stdcall WmiSetSingleInstanceA(long str long long ptr)
680 stdcall WmiSetSingleInstanceW(long wstr long long ptr)
681 stdcall WmiSetSingleItemA(long str long long long ptr)
682 stdcall WmiSetSingleItemW(long wstr long long long ptr)
683 stdcall Wow64Win32ApiEntry(long long long)
684 stdcall WriteEncryptedFileRaw(ptr ptr ptr)

#Only on XP
;@ stdcall CreateProcessAsUserSecure(ptr str str ptr ptr long long ptr str ptr ptr) advapi32.CreateProcessAsUserSecure;only on XP (needed for synchronization)
@ stdcall QueryWindows31FilesMigration(long)
@ stdcall SynchronizeWindows31FilesAndWindowsNTRegistry(long long long long) ;only on XP (needed for synchronization)

#Missing on XP
100 stdcall CreateProcessWithTokenW(ptr long wstr wstr long ptr wstr ptr ptr)
476 stdcall RegDisableReflectionKey(ptr)

#Missing on XP SP1
190 stdcall ElfFlushEventLog(long) advapi32.ElfFlushEventLog

#Missing on Server 2003 RTM and XP 
202 stdcall ElfReportEventAndSourceW(long long ptr long long long ptr ptr long long ptr ptr long ptr ptr)
297 stdcall I_QueryTagInformation(long long ptr)
462 stdcall RegConnectRegistryExA(str ptr long ptr)
463 stdcall RegConnectRegistryExW(wstr ptr long ptr)
470 stdcall RegDeleteKeyExA(long str long long)
471 stdcall RegDeleteKeyExW(long wstr long long)
477 stdcall RegEnableReflectionKey(ptr)	 
@ stdcall RegDisablePredefinedCacheEx() 
486 stdcall RegGetValueA(long str str long ptr ptr ptr) 
502 stdcall RegQueryReflectionKey(ptr ptr)	 ;native on Server 2003, but, missing on XP (needed for synchronization)

#Vista function, however, is supported by advapi32 from XP/2003 post-SP with updates
;@ stdcall LogonUserExExW(str str str long long ptr ptr ptr ptr ptr ptr) advapi32.LogonUserExExW

#Vista Functions implemented (without redirection)
@ stdcall AddMandatoryAce(ptr long long long ptr)
@ stdcall CloseThreadWaitChainSession(ptr)
@ stdcall CredFindBestCredentialA(str long long ptr) 
@ stdcall CredFindBestCredentialW(wstr long long ptr)
@ stdcall CredIsProtectedA(str ptr)
@ stdcall CredIsProtectedW(wstr ptr)
@ stdcall CredProtectA(long str long str long ptr)
@ stdcall CredProtectW(long wstr long wstr long ptr)
@ stdcall CredUnprotectA(long str long str ptr)
@ stdcall CredUnprotectW(long wstr long wstr ptr)
@ stdcall EnableTraceEx(ptr ptr int64 long long long long long long long ptr) 
@ stdcall EventAccessControl(ptr long ptr long long)
@ stdcall EventActivityIdControl(long ptr) ntext.EtwEventActivityIdControl
@ stdcall EventEnabled(long long ptr) ntext.EtwEventEnabled
@ stdcall EventProviderEnabled(int64 long long long) ntext.EtwEventProviderEnabled
@ stdcall EventRegister(ptr ptr ptr ptr) ntext.EtwEventRegister
@ stdcall EventUnregister(long long) ntext.EtwEventUnregister
@ stdcall EventWrite(long long ptr long ptr) ntext.EtwEventWrite
@ stdcall EventWriteEndScenario(long long ptr long ptr)
@ stdcall EventWriteEx(long long ptr long long long ptr ptr long ptr)
@ stdcall EventWriteStartScenario(long long ptr long ptr) 
@ stdcall EventWriteString(int64 long long long wstr) ntext.EtwEventWriteString
@ stdcall EventWriteTransfer(int64 ptr ptr ptr long ptr) ntext.EtwEventWriteTransfer
@ stdcall GetThreadWaitChain(ptr long long long ptr ptr ptr)
@ stdcall InitiateShutdownA(str str long long long)
@ stdcall InitiateShutdownW(wstr wstr long long long)
@ stdcall NotifyServiceStatusChange(ptr long ptr) NotifyServiceStatusChangeA
@ stdcall NotifyServiceStatusChangeA(ptr long ptr) 
@ stdcall NotifyServiceStatusChangeW(ptr long ptr)
@ stdcall OpenThreadWaitChainSession(long ptr)
@ stdcall PerfAddCounters(ptr ptr long)
@ stdcall PerfCloseQueryHandle(ptr)
@ stdcall PerfCreateInstance(ptr ptr wstr long)
@ stdcall PerfDecrementULongCounterValue(ptr ptr long long)
@ stdcall PerfDecrementULongLongCounterValue(ptr ptr long long long)
@ stdcall PerfDeleteCounters(ptr ptr long)
@ stdcall PerfDeleteInstance(ptr ptr)
@ stdcall PerfEnumerateCounterSet(long ptr long long)
@ stdcall PerfEnumerateCounterSetInstances(wstr ptr ptr long ptr)
@ stdcall PerfIncrementULongCounterValue(ptr ptr long long)
@ stdcall PerfIncrementULongLongCounterValue(ptr ptr long long long)
@ stdcall PerfOpenQueryHandle(long ptr)
@ stdcall PerfQueryCounterData(ptr ptr long long)
@ stdcall PerfQueryCounterInfo(ptr ptr long long)
@ stdcall PerfQueryInstance(ptr ptr wstr long)
@ stdcall PerfQueryCounterSetRegistrationInfo(long long long long long long long)
@ stdcall PerfSetCounterRefValue(ptr ptr long ptr)
@ stdcall PerfSetCounterSetInfo(ptr ptr long)
@ stdcall PerfSetULongCounterValue(ptr ptr long long)
@ stdcall PerfSetULongLongCounterValue(ptr ptr long long long)
@ stdcall PerfStartProvider(ptr ptr ptr)
@ stdcall PerfStartProviderEx(ptr ptr ptr)
@ stdcall PerfStopProvider(ptr)
@ stdcall ProcessIdleTasksW() ProcessIdleTasks
@ stdcall QuerySecurityAccessMask(long ptr)
@ stdcall RegCopyTreeA(ptr str ptr)
@ stdcall RegCopyTreeW(ptr str ptr)
@ stdcall RegCreateKeyTransactedA(ptr str long str long long ptr ptr ptr ptr ptr)
@ stdcall RegCreateKeyTransactedW(ptr wstr long wstr long long ptr ptr ptr ptr ptr)
@ stdcall RegDeleteKeyTransactedA(ptr str long long ptr ptr)
@ stdcall RegDeleteKeyTransactedW(ptr wstr long long ptr ptr)
@ stdcall RegDeleteKeyValueA(ptr str str)
@ stdcall RegDeleteKeyValueW(ptr wstr wstr) 
@ stdcall RegDeleteTreeA(long str)
@ stdcall RegDeleteTreeW(long wstr)
@ stdcall RegisterWaitChainCOMCallback(ptr ptr)
@ stdcall RegLoadAppKeyA(str ptr long long long)
@ stdcall RegLoadAppKeyW(wstr ptr long long long)
@ stdcall RegLoadMUIStringA(ptr str str long ptr long str)
@ stdcall RegLoadMUIStringW(ptr str str long ptr long str)
@ stdcall RegOpenKeyTransactedA(ptr str long long ptr ptr ptr)
@ stdcall RegOpenKeyTransactedW(ptr wstr long long ptr ptr ptr)
@ stdcall RegRenameKey(ptr wstr wstr)
@ stdcall RegSetKeyValueA(ptr str str long ptr long)
@ stdcall RegSetKeyValueW(ptr wstr wstr long ptr long)
@ stdcall SetSecurityAccessMask(long ptr)
@ stdcall SetUserFileEncryptionKeyEx(ptr long long ptr)
@ stdcall TreeSetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr long)

#Win7+
@ stdcall EnableTraceEx2(int64 ptr long long int64 int64 long ptr)
@ stdcall EventSetInformation(ptr long ptr long) ntext.EtwEventSetInformation
@ stdcall LsaLookupSids2(ptr long long ptr ptr ptr)

#from Vista/Longhorn advapi32 (advapinew) 
; @ stdcall AddUsersToEncryptedFileEx(long long long long)
; @ stdcall AuditComputeEffectivePolicyBySid(ptr ptr long ptr)
; @ stdcall AuditComputeEffectivePolicyByToken(ptr ptr long ptr)
; @ stdcall AuditEnumerateCategories(ptr ptr)
; @ stdcall AuditEnumeratePerUserPolicy(ptr)
; @ stdcall AuditEnumerateSubCategories(ptr long ptr ptr)
; @ stdcall AuditFree(ptr)
; @ stdcall AuditLookupCategoryGuidFromCategoryId(ptr ptr)
; @ stdcall AuditLookupCategoryIdFromCategoryGuid(ptr ptr)
; @ stdcall AuditLookupCategoryNameA(ptr str)
; @ stdcall AuditLookupCategoryNameW(ptr wstr)
; @ stdcall AuditLookupSubCategoryNameA(ptr str)
; @ stdcall AuditLookupSubCategoryNameW(ptr str)
; @ stdcall AuditQueryPerUserPolicy(ptr ptr long ptr)
; @ stdcall AuditQuerySecurity(long ptr)
; @ stdcall AuditQuerySystemPolicy(ptr long ptr)
; @ stdcall AuditSetPerUserPolicy(ptr ptr long)
; @ stdcall AuditSetSecurity(ptr long)
; @ stdcall AuditSetSystemPolicy(ptr long)
; @ stdcall CheckAppInitBlockedServiceIdentity(long)
; @ stdcall ControlServiceExA(ptr long long ptr)
; @ stdcall ControlServiceExW(ptr long long ptr)
; @ stdcall CredBackupCredentials(long ptr ptr long long)
; @ stdcall CredEncryptAndMarshalBinaryBlob(long long long)
; @ stdcall CredpConvertOneCredentialSize(long long)
; @ stdcall CredpEncodeSecret(long ptr long long long)
; @ stdcall CredProfileUnloaded()
; @ stdcall CredReadByTokenHandle(long ptr long long long)
; @ stdcall CredRestoreCredentials(ptr ptr long long)
; @ stdcall EnumerateTraceGuidsEx(long ptr long ptr long ptr)
; @ stdcall EventAccessQuery(ptr ptr ptr)
; @ stdcall EventAccessRemove(ptr)
; @ stdcall FlushEfsCache(ptr)
; @ stdcall FreeEncryptedFileMetadata(ptr)
; @ stdcall GetEncryptedFileMetadata(wstr ptr ptr)
; @ stdcall I_ScQueryServiceConfig(long long long)
; @ stdcall I_ScSendPnPMessage(long long long long long)
; @ stdcall I_ScValidatePnPService(long long long)
; @ stdcall IsValidRelativeSecurityDescriptor(ptr long long)
; @ stdcall LsaManageSidNameMapping(long ptr ptr)
; @ stdcall SetEncryptedFileMetadata(wstr ptr ptr ptr long ptr)
; @ stdcall SetUserFileEncryptionKeyEx(ptr long long ptr)
; @ stdcall TreeSetNamedSecurityInfoA(str long long ptr ptr ptr ptr long)
; @ stdcall TreeSetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr long)
; @ stdcall UsePinForEncryptedFilesA(long long long)
; @ stdcall UsePinForEncryptedFilesW(long long long)

#Imports from wevtapibase (wevtapi from Longhorn Pre-Reset)
@ stdcall EvtAssertConfig() wevtapibase.EvtIntAssertConfig
@ stdcall EvtClearLog() wevtapibase.EvtIntClearLog
@ stdcall EvtClose() wevtapibase.EvtIntClose
@ stdcall EvtCompileTemplate() wevtapibase.EvtIntCompileTemplate
@ stdcall EvtCreateBookmark() wevtapibase.EvtIntCreateBookmark
@ stdcall EvtCreateMessageRenderContext() wevtapibase.EvtIntCreateMessageRenderContext
@ stdcall EvtCreateValuesRenderContext() wevtapibase.EvtIntCreateValuesRenderContext
@ stdcall EvtDeleteChannelConfig() wevtapibase.EvtIntDeleteChannelConfig
@ stdcall EvtExportLog() wevtapibase.EvtIntExportLog
@ stdcall EvtGetChannelConfigProperty() wevtapibase.EvtIntGetChannelConfigProperty
@ stdcall EvtGetEventMetadataProperty() wevtapibase.EvtIntGetEventMetadataProperty
@ stdcall EvtGetExtendedStatus() wevtapibase.EvtIntGetExtendedStatus
@ stdcall EvtGetMatchedQueryIds() wevtapibase.EvtIntGetMatchedQueryIds
@ stdcall EvtGetNamedObjectInformation() wevtapibase.EvtIntGetNamedObjectInformation
@ stdcall EvtGetPublisherMetadataProperty() wevtapibase.EvtIntGetPublisherMetadataProperty
@ stdcall EvtNext() wevtapibase.EvtIntNext
@ stdcall EvtNextBatch() wevtapibase.EvtIntNextBatch
@ stdcall EvtNextChannelPath() wevtapibase.EvtIntNextChannelPath
@ stdcall EvtNextEventMetadata() wevtapibase.EvtIntNextEventMetadata
@ stdcall EvtNextPublisherId() wevtapibase.EvtIntNextPublisherId
@ stdcall EvtOpenChannelConfig() wevtapibase.EvtIntOpenChannelConfig
@ stdcall EvtOpenChannelEnum() wevtapibase.EvtIntOpenChannelEnum
@ stdcall EvtOpenEventMetadataEnum() wevtapibase.EvtIntOpenEventMetadataEnum
@ stdcall EvtOpenPublisherEnum() wevtapibase.EvtIntOpenPublisherEnum
@ stdcall EvtOpenPublisherMetadata() wevtapibase.EvtIntOpenPublisherMetadata
@ stdcall EvtQueryLog() wevtapibase.EvtIntQueryLog
@ stdcall EvtRegisterPublisher(long long long long)
@ stdcall EvtRegisterSubscription() wevtapibase.EvtIntRegisterSubscription
@ stdcall EvtRender() wevtapibase.EvtIntRender
@ stdcall EvtRenderBookmark() wevtapibase.EvtIntRenderBookmark
@ stdcall EvtReport(long long long long long long long long)
@ stdcall EvtRetractConfig() wevtapibase.EvtIntRetractConfig
@ stdcall EvtSaveChannelConfig() wevtapibase.EvtIntSaveChannelConfig
@ stdcall EvtSeek() wevtapibase.EvtIntSeek
@ stdcall EvtSetChannelConfigProperty() wevtapibase.EvtIntSetChannelConfigProperty
@ stdcall EvtUpdateBookmark() wevtapibase.EvtIntUpdateBookmark
@ stdcall EvtUpdateSubscription() wevtapibase.EvtIntUpdateSubscription

; #Imports from advapilong (advapi32 from Longhorn Pre-Reset)
; @ stdcall EvtGetThreadCorrelationId()
; @ stdcall EvtIsActive()
; @ stdcall EvtRegisterPublisher()
; @ stdcall EvtRegisterSubscriber()
; @ stdcall EvtReport()
; @ stdcall EvtReportText()
; @ stdcall EvtScopePublisher()
; @ stdcall EvtSetThreadCorrelationId()

#Vista Beta Functions
@ stdcall WmiSendDataBlock(ptr long long long long)

#Custom implementation for A_SHA functions for rsa/dss
#@ stdcall V_SHAFinal(ptr ptr)
#@ stdcall V_SHAInit(ptr)
#@ stdcall V_SHAUpdate(ptr ptr long)

#Hooks
87 stdcall ConvertStringSecurityDescriptorToSecurityDescriptorA(str long ptr ptr) ConvertStringSecurityDescriptorToSecurityDescriptorAInternal
88 stdcall ConvertStringSecurityDescriptorToSecurityDescriptorW(wstr long ptr ptr) ConvertStringSecurityDescriptorToSecurityDescriptorWInternal
89 stdcall ConvertStringSidToSidA(ptr ptr) ConvertStringSidToSidAInternal
90 stdcall ConvertStringSidToSidW(ptr ptr) ConvertStringSidToSidWInternal
101 stdcall CreateRestrictedToken(long long long ptr long ptr long ptr ptr) #CreateRestrictedTokenInternal
105 stdcall CreateWellKnownSid(long ptr ptr ptr) CreateWellKnownSidInternal
248 stdcall GetKernelObjectSecurity(long long ptr long ptr) GetKernelObjectSecurityInternal
261 stdcall GetNamedSecurityInfoW(wstr long long ptr ptr ptr ptr ptr) GetNamedSecurityInfoWInternal
273 stdcall GetSecurityInfo(long long long ptr ptr ptr ptr ptr) GetSecurityInfoInternal
284 stdcall GetTokenInformation(ptr long ptr long ptr) GetTokenInformationInternal
322 stdcall IsWellKnownSid(ptr long) IsWellKnownSidInternal
429 stdcall OpenProcessToken(long long ptr) #OpenProcessTokenInternal
434 stdcall OpenThreadToken(ptr long long ptr) #OpenThreadTokenInternal
487 stdcall RegGetValueW(long wstr wstr long ptr ptr ptr) RegGetValueWInternal
490 stdcall RegNotifyChangeKeyValue(long long long long long) RegNotifyChangeKeyValueInternal
563 stdcall SetKernelObjectSecurity(long long ptr) SetKernelObjectSecurityInternal
567 stdcall SetNamedSecurityInfoW(wstr long ptr ptr ptr ptr ptr) SetNamedSecurityInfoWInternal
576 stdcall SetSecurityInfo(long long long ptr ptr ptr ptr) SetSecurityInfoInternal
583 stdcall SetTokenInformation(ptr long ptr long) SetTokenInformationInternal

#Missing on Longhorn/vista
648 stdcall WmiCloseTraceWithCursor(ptr) advapi32.WmiCloseTraceWithCursor
649 stdcall WmiConvertTimestamp(long long long) advapi32.WmiConvertTimestamp
659 stdcall WmiGetNextEvent(long) advapi32.WmiGetNextEvent
666 stdcall WmiOpenTraceWithCursor(long long) advapi32.WmiOpenTraceWithCursor
667 stdcall WmiParseTraceEvent(long long long long long) advapi32.WmiParseTraceEvent